password sent on adding admin in the console
Opened this issue · 4 comments
minaamir26 commented
A. Severity: ( high)
B. Reported: by Mina
C. Description: On adding an admin with an email (or even with any text) the password is sent in the console while I should only get it from the email sen to me
- login as an admin
- add admin with a text not an email
- press add admin
- see the console, you find all the data of this admin (including the password ! )
D. Expected result: The password should not be sent in the console, I should only get it from the email sent to me
markarsanious commented
It will only appear to the admin who added him so that's okay
minaamir26 commented
As an admin, I should not know the passwords of users or any other admins
markarsanious commented
as an admin, you won't get access to any profile of a user or a SP don't worry
minaamir26 commented
But with this info , email and password (that I got in the console) I can login with these info